Multi-factor Authentication via Usage Pattern Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication methods are inadequate in preventing unauthorized access, especially when sensitive information is involved, as they often rely solely on username and password combinations, which can be compromised by stolen devices or cached credentials.
Innovation Solution
A system that monitors and learns user usage patterns across multiple computing devices, interrupting authentication processes if abnormal usage is detected and requiring a second factor credential from a different registered device to ensure secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional username and password authentication is used, then ease of operation is improved, but security is worsened due to vulnerability to stolen devices and cached credentials
Solution Approach 1:
The authentication system is segmented into multiple independent factors: something the user knows (username/password), something the user possesses (registered computing device), and something the user is (biometric data). This segmentation ensures that compromise of one factor does not lead to complete system failure, thereby improving security while maintaining operational ease through the optional nature of additional factors.
Solution Approach 2:
The system performs preliminary actions by registering multiple computing devices and collecting biometric data before authentication is needed. This advance preparation enables the system to quickly verify user identity through multiple pre-established factors, improving both security and the speed of authentication without requiring complex real-time processing.
2Reliability
If multi-factor authentication with multiple devices is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The system achieves universality by making the authentication mechanism applicable across multiple computing devices and contexts. The same authentication framework works whether the user accesses from a smartphone, tablet, or computer, and whether one or multiple factors are required. This multi-functionality reduces the need for device-specific implementations, thereby managing complexity while improving security.
Solution Approach 2:
The system employs self-service mechanisms where the user's own computing devices and biometric data serve as the authentication factors. The registered devices automatically participate in the authentication process without requiring additional hardware or complex configuration, allowing the system to enhance security while minimizing added complexity through automated, user-centric processes.
3Reliability
If usage pattern monitoring is implemented to detect abnormal access, then security is improved, but loss of time is worsened due to additional authentication steps
Solution Approach 1:
The authentication system dynamically adapts its requirements based on real-time usage pattern analysis. When access patterns match established norms, the system processes authentication quickly with minimal factors. When anomalies are detected, the system dynamically increases security requirements by requesting additional factors or devices. This dynamic behavior improves fraud detection while minimizing time loss for legitimate users.
Solution Approach 2:
The system implements feedback loops where usage patterns are continuously monitored and fed back into the authentication decision-making process. This feedback mechanism allows the system to learn from user behavior and adjust authentication requirements in real-time, improving fraud detection accuracy while reducing unnecessary authentication steps for normal users, thereby balancing security with time efficiency.
Data Source
AI summary
Usage information of a user for a plurality of computing devices is identified. A usage pattern for each computing device of the plurality of computing devices of the user is developed based on the identified usage information of the user. An indication of the user accessing an application on a first computing device of the plurality of computing devices is received. The application requires one or more credentials for an authentication process associated with the application. A determination is made whether the user accessing the application using the first computing device is following the developed usage pattern of the user. Responsive to determining that the user accessing the application using the first computing device is not following developed usage pattern of the user, the authentication process associated with the application is interrupted.